CyberRota Analysis
AI-GeneratedThe file-psd plugin in GIMP is vulnerable to a heap-based buffer overflow due to an integer overflow when processing specially crafted PSD files, which can lead to application crashes or arbitrary code execution. This vulnerability poses a significant risk to users of GIMP, particularly those handling untrusted image files. Organizations and individuals using GIMP should prioritize patching this flaw to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD (Photoshop Document) image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a heap-based buffer overflow when the image data is decoded. This buffer overflow corrupts adjacent heap objects, allowing for a controlled memory write that can result in an application crash or arbitrary code execution.